Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fQbP-oT8sJfhhijV9swHpHOFSP8.roa
File: fQbP-oT8sJfhhijV9swHpHOFSP8.roa (raw, json)
Hash identifier: /hAPYjfR3xGXXcCWp+qeIn7Y1zkmZvYxCtNAJr1rv2k=
Subject key identifier: 7D:06:CF:FA:84:FC:B0:97:E1:86:28:D5:F6:CC:07:A4:73:85:48:FF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC7943DEF1442B51C3A71CAFF438B1B00
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fQbP-oT8sJfhhijV9swHpHOFSP8.roa
Signing time: Tue 02 Jan 2024 00:30:30 +0000
ROA not before: Tue 02 Jan 2024 00:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3291
IP address blocks: 194.158.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3d:ef:14:42:b5:1c:3a:71:ca:ff:43:8b:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d06cffa84fcb097e18628d5f6cc07a4738548ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ca:ca:94:72:55:6c:b7:a0:ad:79:aa:df:aa:
f6:64:b2:27:13:56:68:eb:3b:18:85:02:25:33:96:
66:0e:01:a8:19:77:91:a9:2d:81:70:e4:8a:ad:ca:
25:b2:57:69:2d:a8:4f:be:0f:89:d5:b0:18:74:17:
8c:04:cc:2b:13:46:38:48:3e:4c:e9:4d:c3:ff:19:
b6:32:f0:56:d3:de:c6:03:d7:a3:12:7c:b4:d8:d5:
74:49:9b:92:0b:00:cc:12:83:dc:25:ff:9b:6b:f0:
7b:39:ec:ce:e6:36:c7:c9:6e:b2:45:26:c1:8a:5d:
d9:c6:40:2f:fd:ea:da:ea:62:05:0c:2d:17:8a:fb:
2b:93:d9:ca:e0:48:19:58:7c:78:a1:bd:7a:b4:c6:
25:a0:2b:ec:bc:cb:64:5b:40:f6:b7:e2:b5:4a:e2:
8d:e5:d3:51:45:b5:da:e8:e4:79:92:54:69:8f:f8:
90:f0:93:7a:a9:6a:7d:96:d3:63:c9:0c:87:9f:38:
64:c0:aa:36:8d:34:b9:38:83:a1:d0:f1:49:94:ff:
91:e7:18:5d:da:95:3e:c4:5e:40:29:4a:00:c8:d8:
61:22:26:d1:72:72:5d:0b:bd:4b:d5:0c:e5:ee:05:
59:9a:1c:0b:2e:f8:3b:90:e7:26:fd:2f:6c:6e:58:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:06:CF:FA:84:FC:B0:97:E1:86:28:D5:F6:CC:07:A4:73:85:48:FF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fQbP-oT8sJfhhijV9swHpHOFSP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.158.26.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ab:f5:c3:5e:de:ce:7e:a6:0a:c2:60:ac:dc:34:c9:bc:cc:
62:9a:e6:8e:b3:75:d4:71:e1:d8:b3:64:de:7d:08:7a:c7:74:
b7:c6:71:08:1a:11:dd:32:a0:b1:ba:66:70:b9:fd:01:69:e9:
8e:79:8e:ca:7e:9d:e2:ce:5b:df:86:8e:ca:05:02:53:6b:c7:
74:1d:a6:a4:05:1b:f4:12:65:b9:38:da:c3:57:99:01:57:85:
7b:5f:ac:f0:58:d5:f8:6c:ae:cb:1a:44:6d:12:a7:36:a8:00:
c4:4d:08:1e:40:41:18:b9:ad:f2:73:74:8b:1f:06:bd:f0:4d:
12:92:f4:a0:fa:fc:43:a2:81:64:7d:a1:d9:8f:7c:42:74:01:
76:9c:14:fe:bb:42:b4:2f:44:df:0c:8a:0e:45:c3:50:cc:5b:
d0:97:fc:a2:96:a4:7e:b8:d3:f8:41:6b:16:58:d9:0e:1a:41:
3d:f7:22:ed:e9:cf:84:26:c6:ed:f0:62:72:46:9d:bc:73:80:
2b:74:25:e6:81:17:b4:db:a4:8e:b8:c6:22:2a:c1:32:90:02:
4a:b7:9e:f6:cb:12:2d:27:84:b5:06:8b:60:b7:cf:5c:a5:7f:
c0:a8:21:28:91:e9:f9:a8:51:79:4a:ff:dc:0a:e1:cd:8b:ce:
bf:3f:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:18:14 2024 by rpki-client on console-fra.rpki-client.org